Skip to content
API Documentation
BastionGuard™
rg_kernel_config Struct Reference

#include <rootguard_shared.h>

Public Attributes

__u32 abi_version
__u32 mode
__u32 unknown_action
__u32 log_trusted
__u32 metadata_action
__u32 credential_action
__u32 monitor_global_privilege_metadata
__u32 global_metadata_action
__u32 ignore_run_global_metadata
__u32 detect_global_metadata_bursts
__u32 global_metadata_sample_limit
__u32 metadata_burst_threshold
__u32 metadata_burst_window_ms
__u32 metadata_burst_cooldown_ms

Detailed Description

Definition at line 131 of file rootguard_shared.h.

Member Data Documentation

◆ abi_version

__u32 rg_kernel_config::abi_version

Definition at line 132 of file rootguard_shared.h.

◆ credential_action

__u32 rg_kernel_config::credential_action

Definition at line 137 of file rootguard_shared.h.

Referenced by guard_current_root_provenance().

◆ detect_global_metadata_bursts

__u32 rg_kernel_config::detect_global_metadata_bursts

Definition at line 141 of file rootguard_shared.h.

Referenced by observe_unprotected_metadata().

◆ global_metadata_action

__u32 rg_kernel_config::global_metadata_action

Definition at line 139 of file rootguard_shared.h.

Referenced by metadata_verdict().

◆ global_metadata_sample_limit

__u32 rg_kernel_config::global_metadata_sample_limit

Definition at line 142 of file rootguard_shared.h.

Referenced by observe_unprotected_metadata().

◆ ignore_run_global_metadata

__u32 rg_kernel_config::ignore_run_global_metadata

Definition at line 140 of file rootguard_shared.h.

Referenced by BPF_PROG().

◆ log_trusted

__u32 rg_kernel_config::log_trusted

Definition at line 135 of file rootguard_shared.h.

Referenced by emit_event().

◆ metadata_action

__u32 rg_kernel_config::metadata_action

Definition at line 136 of file rootguard_shared.h.

Referenced by metadata_verdict().

◆ metadata_burst_cooldown_ms

__u32 rg_kernel_config::metadata_burst_cooldown_ms

Definition at line 145 of file rootguard_shared.h.

Referenced by observe_unprotected_metadata().

◆ metadata_burst_threshold

__u32 rg_kernel_config::metadata_burst_threshold

Definition at line 143 of file rootguard_shared.h.

Referenced by observe_unprotected_metadata().

◆ metadata_burst_window_ms

__u32 rg_kernel_config::metadata_burst_window_ms

Definition at line 144 of file rootguard_shared.h.

Referenced by observe_unprotected_metadata().

◆ mode

__u32 rg_kernel_config::mode

◆ monitor_global_privilege_metadata

__u32 rg_kernel_config::monitor_global_privilege_metadata

Definition at line 138 of file rootguard_shared.h.

Referenced by BPF_PROG(), handle_xattr_change(), and observe_unprotected_metadata().

◆ unknown_action

__u32 rg_kernel_config::unknown_action

Definition at line 134 of file rootguard_shared.h.

Referenced by decide_escalation().


The documentation for this struct was generated from the following file: